$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y99ziKeVRsYJcTlsM_6lOoq5AOk.roa File: y99ziKeVRsYJcTlsM_6lOoq5AOk.roa (raw, json) Hash identifier: JwyVbG65GiC/Jq/lXYVmyn6B0uLn2FIx//enD+ecrAw= Subject key identifier: CB:DF:73:88:A7:95:46:C6:09:71:39:6C:33:FE:A5:3A:8A:B9:00:E9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C6D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y99ziKeVRsYJcTlsM_6lOoq5AOk.roa Signing time: Tue 01 Apr 2025 02:00:33 +0000 ROA not before: Tue 01 Apr 2025 02:00:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CBDF7388A79546C60971396C33FEA53A8AB900E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:ce:50:51:13:c3:d4:fb:93:4c:c8:01:88: 8d:cb:6b:16:76:18:ef:45:23:47:fa:80:53:b9:86: d2:00:b8:f2:33:b4:3f:65:7a:41:56:f6:03:6d:d4: 98:fa:10:17:24:64:76:f3:95:d4:e3:67:fd:88:3f: 61:d1:e4:6b:c4:56:a1:03:44:d4:03:75:35:86:54: a2:76:60:0c:b6:1f:3c:a4:a4:44:ea:6e:33:e9:b4: d9:20:e1:ad:43:2b:d9:cc:43:eb:f2:a9:dc:bb:f1: 67:15:db:6e:fe:f7:4f:d2:cc:48:fc:96:e7:5c:e0: 94:47:cb:e9:c6:6a:30:fe:94:4e:3d:f7:16:f1:b8: b8:09:85:61:b3:d5:65:c6:54:69:89:c7:cf:f6:b6: 17:24:53:22:b4:e6:19:88:0e:a8:2f:97:09:a7:8b: 8f:08:57:99:83:33:49:9c:16:93:a1:4c:c0:d6:52: 88:43:d5:21:f0:95:80:e7:44:0d:8f:df:36:31:62: f0:25:aa:cf:ea:b7:a6:25:b3:ea:26:16:db:a8:99: 9a:86:2c:23:44:7e:37:68:b0:14:c4:d0:32:c8:45: 2a:37:b7:76:a8:53:22:08:d8:7d:ac:65:d2:a2:a7: 24:7a:0f:35:5e:03:73:b1:f9:7c:e4:98:86:4b:54: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:73:88:A7:95:46:C6:09:71:39:6C:33:FE:A5:3A:8A:B9:00:E9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y99ziKeVRsYJcTlsM_6lOoq5AOk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.46.0/24 Signature Algorithm: sha256WithRSAEncryption a0:a7:ae:7b:f8:66:b8:28:30:b4:fb:49:c0:2c:fb:f7:e1:78: 7b:4f:47:1d:7d:e3:42:4c:f4:5c:0a:d6:f5:13:66:57:22:9e: 79:c7:3e:6d:10:b2:48:58:a5:1d:df:dc:b2:1c:37:d8:a4:d5: 55:8e:76:d3:5c:80:b7:2f:03:c1:e6:e9:b0:29:58:df:6f:00: d9:6a:e6:f6:8f:21:b8:27:50:d3:61:f5:d5:f5:86:6f:c4:09: 40:e8:d7:33:62:c2:61:97:ba:92:11:a5:86:a9:2f:4d:1b:2a: ff:1e:bc:d2:c3:e4:75:6e:3b:1b:33:b5:43:36:00:25:e7:1e: a7:e1:49:18:10:32:81:ce:0d:56:4b:00:89:e7:44:53:1f:c4: 40:e6:8d:54:d3:4f:1a:f8:c2:5f:ae:54:fe:be:83:99:05:4f: 02:fe:23:08:3b:c0:bc:27:ad:11:35:a8:6f:6f:dc:f8:d7:9f: 50:f9:5a:56:2c:e1:33:c4:f6:d9:38:96:7a:dc:fa:74:5b:71: a6:8e:0e:d8:b6:f3:57:ad:c2:9c:97:3d:4c:56:4c:a7:96:83: f4:0a:c0:a7:ea:97:a1:dc:07:0c:48:7b:eb:4f:38:ab:be:64: bf:5f:20:c9:eb:81:ab:e0:87:fa:83:62:1b:e1:3f:2d:0a:68: 69:61:68:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCREY3Mzg4QTc5NTQ2 QzYwOTcxMzk2QzMzRkVBNTNBOEFCOTAwRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5aM5QURPD1PuTTMgBiI3LaxZ2GO9FI0f6gFO5htIAuPIztD9l ekFW9gNt1Jj6EBckZHbzldTjZ/2IP2HR5GvEVqEDRNQDdTWGVKJ2YAy2HzykpETq bjPptNkg4a1DK9nMQ+vyqdy78WcV227+90/SzEj8ludc4JRHy+nGajD+lE499xbx uLgJhWGz1WXGVGmJx8/2thckUyK05hmIDqgvlwmni48IV5mDM0mcFpOhTMDWUohD 1SHwlYDnRA2P3zYxYvAlqs/qt6Yls+omFtuomZqGLCNEfjdosBTE0DLIRSo3t3ao UyII2H2sZdKipyR6DzVeA3Ox+XzkmIZLVLb9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy99ziKeVRsYJcTlsM/6lOoq5AOkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3k5OXppS2VWUnNZSmNUbHNNXzZsT29xNUFPay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaC4wDQYJKoZIhvcNAQELBQADggEBAKCnrnv4ZrgoMLT7ScAs+/fheHtP Rx1940JM9FwK1vUTZlcinnnHPm0QskhYpR3f3LIcN9ik1VWOdtNcgLcvA8Hm6bAp WN9vANlq5vaPIbgnUNNh9dX1hm/ECUDo1zNiwmGXupIRpYapL00bKv8evNLD5HVu OxsztUM2ACXnHqfhSRgQMoHODVZLAInnRFMfxEDmjVTTTxr4wl+uVP6+g5kFTwL+ Iwg7wLwnrRE1qG9v3PjXn1D5WlYs4TPE9tk4lnrc+nRbcaaODti281etwpyXPUxW TKeWg/QKwKfql6HcBwxIe+tPOKu+ZL9fIMnrgavgh/qDYhvhPy0KaGlhaKA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:39 2025 by rpki-client